CVE-2026-35213

CVE-2026-35213 affects the @hapi/content package: three regexes used to parse Content-Type and Content-Disposition headers enable Regular Expression Denial of Service (ReDoS) via crafted header values. All versions up to 6.0.0 are vulnerable; remediation is to upgrade to 6.0.1 where the issue is ...

CVE-2017-16111

The CVE-2017-16111 issue affects the content module used by hapijs to parse HTTP Content-* headers. It is vulnerable to a regular expression denial of service when processing specially crafted Content-Type or Content-Disposition headers, which can cause CPU exhaustion and potentially degrade avai...